
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A28E0021A97C4DDCB0397C7D1D2B26D5AD88C895.cer
File: A28E0021A97C4DDCB0397C7D1D2B26D5AD88C895.cer (raw, json)
Hash identifier: PuZ4aEI2wGqy7pJDBcZ/yC9UEq8CdpV8Q+NFUMWBq90=
Subject key identifier: A2:8E:00:21:A9:7C:4D:DC:B0:39:7C:7D:1D:2B:26:D5:AD:88:C8:95
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 15165217AE8C31FE29EF8D231ECD73FD134A9EAF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/0D764534A0BE3B327A51E7497948716374B40BF8A1A6178EFFC61EC66812AF36/0/A28E0021A97C4DDCB0397C7D1D2B26D5AD88C895.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/0D764534A0BE3B327A51E7497948716374B40BF8A1A6178EFFC61EC66812AF36/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Thu 23 Oct 2025 12:55:01 +0000
Certificate not after: Thu 22 Oct 2026 13:00:01 +0000
Subordinate resources: AS: 273874
IP: 2803:5d50::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 29 Oct 2025 22:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:16:52:17:ae:8c:31:fe:29:ef:8d:23:1e:cd:73:fd:13:4a:9e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Oct 23 12:55:01 2025 GMT
Not After : Oct 22 13:00:01 2026 GMT
Subject: CN=A28E0021A97C4DDCB0397C7D1D2B26D5AD88C895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:5e:66:7a:63:e3:7a:66:47:32:7c:2d:c9:
d5:c3:33:8c:aa:64:89:2b:55:ea:a9:70:7a:ff:85:
6b:76:ff:ba:c5:86:0b:9a:d0:44:ff:47:8a:41:66:
00:92:15:07:ad:c4:2a:3d:88:52:7c:3f:0a:4d:7d:
f6:aa:cd:cd:04:ab:04:4e:ec:52:3c:d9:e8:3c:aa:
7b:9c:72:f5:0d:19:93:0f:e9:1e:07:0c:94:35:f8:
c3:75:15:e5:cb:81:cc:e4:67:79:bb:c8:f9:30:c9:
52:ab:67:4a:0d:e9:28:09:30:9c:68:60:ee:66:3d:
85:41:62:72:3e:af:95:37:8f:50:67:40:c5:0b:a0:
dd:03:6b:34:d6:c6:f5:73:44:83:df:76:9f:72:a8:
9e:58:ab:fa:11:c1:a1:6a:3f:82:1c:d0:ad:de:5b:
88:41:30:68:a1:1c:21:f3:d6:cf:84:bf:a8:f3:86:
12:0f:81:69:73:d6:f7:0c:a0:22:fd:a0:be:6c:a5:
90:7b:e7:14:67:eb:51:e6:f0:9e:79:a4:e5:1c:2f:
ca:f4:cd:03:d0:ac:51:fb:72:8e:a3:17:90:45:0b:
07:9f:d4:e9:8c:f2:a7:a1:9b:a3:9c:88:9b:22:0d:
39:d1:8c:a9:65:aa:f9:fa:65:27:97:4c:d6:83:a5:
4e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A2:8E:00:21:A9:7C:4D:DC:B0:39:7C:7D:1D:2B:26:D5:AD:88:C8:95
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0D764534A0BE3B327A51E7497948716374B40BF8A1A6178EFFC61EC66812AF36/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0D764534A0BE3B327A51E7497948716374B40BF8A1A6178EFFC61EC66812AF36/0/A28E0021A97C4DDCB0397C7D1D2B26D5AD88C895.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:5d50::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273874
Signature Algorithm: sha256WithRSAEncryption
cd:e5:e1:df:10:04:ac:1b:b8:56:8c:2c:1f:ff:c5:47:fa:f9:
6b:61:55:8d:1d:ac:38:26:cf:64:63:d8:da:29:0b:fc:82:e5:
cd:fb:c6:0d:aa:af:59:ce:ac:20:2c:bd:b8:92:2e:21:32:ef:
3a:64:16:9c:60:b3:7a:da:c5:2e:fe:30:c5:52:9a:ef:37:a5:
df:e1:d6:ab:4a:5b:e9:c5:39:39:2b:91:fa:21:64:56:2f:7e:
63:7e:9f:66:68:80:8d:01:a1:20:a9:82:e9:af:7d:73:22:13:
9b:a3:ac:bb:6e:84:37:7e:97:90:cc:8d:16:75:c9:f5:6f:8a:
13:5e:5a:a0:8d:c8:5b:be:61:41:d1:1e:f6:ba:e9:32:a4:b6:
6c:76:3e:93:37:0b:5a:db:01:c5:1f:dc:3f:96:23:56:10:4f:
ef:28:96:6f:b3:d3:16:3a:10:ee:fb:6f:50:e4:7a:3a:0a:da:
e7:cb:f5:d5:ff:a1:28:dc:b4:74:56:b9:58:3d:11:83:0f:e2:
4f:e5:f4:ea:67:6b:14:f1:57:88:49:df:63:c1:2d:6d:15:87:
58:76:20:e6:aa:cc:db:af:78:f6:c8:dc:bc:00:3a:92:20:0d:
6c:f9:c5:6d:fb:74:34:85:d1:30:18:85:3d:49:c6:5f:68:e5:
50:34:59:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 08:59:33 2025 by rpki-client